Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks | CyberScoop<\/title> <meta name=\"description\" content=\"Critical infrastructure groups are pressing CISA to narrow its long-delayed CIRCIA cyber reporting rule, demanding fewer covered entities and reduced reporting burdens.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/cisa-circia-cyber-incident-reporting-rule-feedback\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Industry's message on CIRCIA: Please ask us fewer questions about cyberattacks\"> <meta property=\"og:description\" content=\"Critical infrastructure groups are pressing CISA to narrow its long-delayed CIRCIA cyber reporting rule, demanding fewer covered entities and reduced reporting burdens.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/cisa-circia-cyber-incident-reporting-rule-feedback\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2026-07-24T20:58:35+00:00\"> <meta property=\"article:modified_time\" content=\"2026-07-24T20:58:37+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1075\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Tim Starks\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@timstarks\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1784312972g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1784911384g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1782867887g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=9519dd464d894b805a10\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/89967\"><meta name=\"generator\" content=\"WordPress 6.8.6\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=89967\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcisa-circia-cyber-incident-reporting-rule-feedback%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcisa-circia-cyber-incident-reporting-rule-feedback%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-89967 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/cisa-circia-cyber-incident-reporting-rule-feedback\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"26.27150084317\">\n<div class=\"single-article__header-content\" readability=\"35.549019607843\">\n<p> The administration set a target date of September for CISA to finalize the rule, but where the agency is headed remains a mystery to some. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/89967\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"358\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks.jpg?resize=640%2C358&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=300,168 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=768,430 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=1024,573 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=1536,860 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=600,337 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=1200,672 1200w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-2.jpg?resize=1500,840 1500w\" sizes=\"(max-width: 1200px) 100vw, 1200px\"><figcaption> Digital legal compliance and government regulation concept with security icons, creative graphic style, on blurred US flag background. 3D Rendering. ismagilov, istock\/Getty Images Plus <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"81.198981492982\"><body readability=\"166.96901072706\"><\/p>\n<p>Industry groups who spoke at town halls hosted by the Cybersecurity and Infrastructure Security Agency about a pending cyber incident notification regulation had a few consistent messages:<\/p>\n<p>We want this to apply to fewer of us. We don\u2019t want to report to you on as many incidents. We want to give you less information when we do. <\/p>\n<p>CISA last week <a href=\"https:\/\/www.regulations.gov\/docket\/CISA-2022-0010\/document?sortBy=postedDate\">published transcripts<\/a> from the town halls, where the agency sought feedback on the delayed rule for the 2022 Cyber Incident Reporting for Critical Infrastructure Act \u2014 <a href=\"https:\/\/cyberscoop.com\/incident-reporting-legislation\/\">perhaps the most significant <\/a>cyber legislation Congress has ever passed. That law required critical infrastructure owners to report major cyberattacks to the federal government within 72 hours, and ransomware payments within 24 hours.<\/p>\n<p>The law was designed to let the feds share information about significant incidents more widely to prepare other would-be victims. CISA published a proposed rule on the law in 2024 to define terms like \u201ccovered cyber incident\u201d and more, and industry groups have <a href=\"https:\/\/cyberscoop.com\/cisa-circia-critical-infrastructure-reporting-letter\/\">persistently registered their objections<\/a> since then.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>CISA missed the October 2025 deadline for finalizing the rule, then missed a <a href=\"https:\/\/cyberscoop.com\/cisa-pushes-final-cyber-incident-reporting-rule-to-may-2026\/\">May reset target<\/a> date, and now the administration says the rule will be completed <a href=\"https:\/\/www.reginfo.gov\/public\/do\/eAgendaViewRule?pubId=202510&RIN=1670-AA04\">in September<\/a>.<\/p>\n<p>Some industry sources told CyberScoop they consider that unlikely. Most also haven\u2019t received any indications from CISA about how much of the town hall feedback it intends to embrace, they said.<\/p>\n<h4 class=\"wp-block-heading\" id=\"h-companies-incidents-information\">Companies, incidents, information <\/h4>\n<p>Those town hall comments over the course of four June dates were often very direct.<\/p>\n<p>\u201cThe rule includes too many companies,\u201d said Grant MacIntyre, director of regulatory affairs and senior attorney at the Auto Care Association. CISA estimated that more than 300,000 entities will be subject to its requirements.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Some industries advocated for their removal entirely, such as two different groups representing elements of the insurance sector. Some sought to reduce the number affected within their sector, such as the Nuclear Energy Institute wanting the list cut down to those already subject to Nuclear Regulatory Commission cybersecurity reporting requirements.<\/p>\n<p>While CISA wrote the regulation with the intention to avoid overburdening small businesses, some feared it wouldn\u2019t work that way in practice.<\/p>\n<p>\u201cThe current approach where an entity qualifies either by size or by sector effectively negates the intended limitation on small businesses,\u201d said Douglas Leigh, vice president of legislative affairs for the Alliance for Chemical Distribution. \u201cIn chemical distribution, even small entities could be swept in under multiple cyber categories.\u201d<\/p>\n<p>Where the rule specifies what kind of data organizations should report in a major incident, CISA should \u201cseek to collect the least amount of information possible in the easiest to report fashion to facilitate information accuracy and reporting speed,\u201d said Samantha Burch, vice president of technology public policy at government affairs at AHIP, a health insurance industry trade association.<\/p>\n<p>Many, for instance, argued the report should not include information on the affected entities\u2019 security measures.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Others worried about what kind of incidents would trigger reporting requirements.<\/p>\n<p>\u201cMy big concern is that you\u2019re going to be asking us to report incidents on every time some foreign entity tickles our firewall, whether they do anything or not, if they just do a ping or a search,\u201d said Tim Pospisil, chief security officer for Nebraska Public Power District. \u201cAnd that could be extremely burdensome.\u201d<\/p>\n<h4 class=\"wp-block-heading\" id=\"h-industry-expectations\">Industry Expectations<\/h4>\n<p>One industry representative told CyberScoop that CISA\u2019s willingness to <a href=\"https:\/\/cyberscoop.com\/cisa-circia-town-halls-cyber-incident-reporting-rule\/\">hold town halls<\/a>, combined with the Trump administration strategy emphasizing <a href=\"https:\/\/cyberscoop.com\/trump-cybersecurity-strategy\/\">\u201ccommon sense regulation,\u201d<\/a> was a good sign about where the rule might be heading.<\/p>\n<p>\u2018They are not picking up on the Biden administration\u2019s approach and tweaking it. They\u2019re thinking, \u2018What are the specific pieces of information we need during a cyber incident to help critical infrastructure companies respond?\u2019\u201d said Henry Young, senior director of policy for the Business Software Alliance. \u201cIn general, industry is optimistic that what we\u2019ll end up with are a few of the most important pieces of information, so that in the emergency, companies can act quickly and actually respond to an incident rather than completing lots of paperwork.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>But multiple industry sources said they haven\u2019t gotten many indications about CISA\u2019s intentions. Nor are they optimistic CISA can meet the September target date in the Unified Agenda of Regulatory and Deregulatory Actions.<\/p>\n<p>\u201cIt could slip,\u201d one said. \u201cBut I think they\u2019re going to try.\u201d<\/p>\n<p>That industry source said they\u2019d like to see a proposal from CISA before it cements anything forever.<\/p>\n<p>Another industry source said it\u2019s hard to trust the September date given past CISA delays, some of which aren\u2019t CISA\u2019s fault, such as dealing with multiple government shutdowns. Some of the delays trace to the Trump administration, given the massive cuts to CISA\u2019s personnel.<\/p>\n<p>Congress is also getting impatient.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The House Appropriations Committee \u201cis concerned about delays in publishing the final CIRCIA rule and urges CISA to finalize it promptly following stakeholder review and feedback,\u201d the panel wrote in the <a href=\"https:\/\/www.congress.gov\/119\/crpt\/hrpt697\/CRPT-119hrpt697.pdf\">committee report<\/a> for its fiscal 2027 Department of Homeland Security spending bill.<\/p>\n<p>It\u2019s a much different world than when CISA began writing the rule, something the agency also has to take into account now.<\/p>\n<p>\u201cAI has fundamentally changed the playing field,\u201d the source said. \u201cWhen this was set up, we didn\u2019t even have the first generation of ChatGPT. We\u2019re now in a mythos class environment.\u201d That\u2019s changed \u201chow quickly we can identify threats, mitigate them, the level of human intervention, potential machine engagement.\u201d<\/p>\n<p>While CISA might have good intentions, past interactions give cause for skepticism about how capable it is of working collaboratively with industry, the source said.<\/p>\n<p>Another industry source said conversations with CISA suggest the agency will look to simplify the regulation to keep it smaller and narrower, then potentially build upon it later.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<h4 class=\"wp-block-heading\" id=\"h-from-cisa-s-mouth\">From CISA\u2019s mouth<\/h4>\n<p>Nick Andersen, the acting director of CISA, talked about his overarching intentions with CIRCIA at the town halls.<\/p>\n<p>\u201cCISA does not view CIRCIA as simply a check-the-box compliance exercise,\u201d Andersen said at one. \u201cCIRCIA will enhance visibility into the cyberthreat landscape to enable a robust national early warning capability for critical infrastructure. By quickly reporting covered cyber incidents and ransom payments to CISA, we will be able to provide timely and actionable defensive and eviction measures to your network defenders.\u201d<\/p>\n<p>Asked by CyberScoop about next steps for CIRCIA, and how it might incorporate the industry feedback, a spokesperson provided a statement.<\/p>\n<p>\u201cCISA recognizes the importance of CIRCIA, however, multiple funding lapses impacted CISA\u2019s ability to conduct rulemaking activity for CIRCIA. CISA continues to work on the final rule,\u201d the spokesperson said, adding that 1,200 critical infrastructure stakeholders attended the town halls. \u201cCISA will continue to communicate updates on the CIRCIA rulemaking process and timeline through CISA.gov\/CIRCIA and the Office of Information and Regulatory Affairs\u2019 Unified Agenda of Regulatory and Deregulatory Actions.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\">\n<div class=\"author-card\" readability=\"7.7216117216117\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks-1.jpg?w=640&ssl=1\" alt=\"Tim Starks\"> <\/figure>\n<\/p><\/div>\n<div class=\"author-card__details\" readability=\"10.901098901099\">\n<h4 class=\"author-card__name\">Written by Tim Starks<\/h4>\n<p> Tim Starks is senior reporter at CyberScoop. His previous stops include working at The Washington Post, POLITICO and Congressional Quarterly. An Evansville, Ind. native, he’s covered cybersecurity since 2003. Email Tim here: <a href=\"mailto:tim.starks@cyberscoop.com\">tim.starks@cyberscoop.com<\/a>. <\/div>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/cisa-circia-cyber-incident-reporting-rule-feedback\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Industry’s message on CIRCIA: Please ask us fewer questions about<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[384,622,1794,655,413,452,117,2173,2560,439,817,290],"tags":[388,627,1795,657,415,454,119,2176,2576,443,821,296],"class_list":["post-8861","post","type-post","status-publish","format-standard","hentry","category-artificial-intelligence-ai","category-biden-administration","category-circia","category-congress","category-critical-infrastructure","category-cybersecurity-and-infrastructure-security-agency-cisa","category-government","category-information-sharing","category-nick-andersen","category-policy","category-regulation","category-trump-administration","tag-artificial-intelligence-ai","tag-biden-administration","tag-circia","tag-congress","tag-critical-infrastructure","tag-cybersecurity-and-infrastructure-security-agency-cisa","tag-government","tag-information-sharing","tag-nick-andersen","tag-policy","tag-regulation","tag-trump-administration"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/artificial-intelligence-ai\/\" rel=\"category tag\">artificial intelligence (AI)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/biden-administration\/\" rel=\"category tag\">Biden administration<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/circia\/\" rel=\"category tag\">CIRCIA<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/congress\/\" rel=\"category tag\">Congress<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/critical-infrastructure\/\" rel=\"category tag\">critical infrastructure<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity-and-infrastructure-security-agency-cisa\/\" rel=\"category tag\">Cybersecurity and Infrastructure Security Agency (CISA)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/government\/\" rel=\"category tag\">Government<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/information-sharing\/\" rel=\"category tag\">information sharing<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/nick-andersen\/\" rel=\"category tag\">Nick Andersen<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/policy\/\" rel=\"category tag\">Policy<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/regulation\/\" rel=\"category tag\">regulation<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/trump-administration\/\" rel=\"category tag\">Trump administration<\/a>","tag_info":"Trump administration","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=8861"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8861\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=8861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=8861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=8861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":8861,"date":"2026-07-24T15:58:35","date_gmt":"2026-07-24T20:58:35","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=89967"},"modified":"2026-07-24T15:58:35","modified_gmt":"2026-07-24T20:58:35","slug":"industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/07\/24\/industrys-message-on-circia-please-ask-us-fewer-questions-about-cyberattacks\/","title":{"rendered":"Industry\u2019s message on CIRCIA: Please ask us fewer questions about cyberattacks"},"content":{"rendered":"